Paypal phishing w/o hosted HTML files

It is the first time I can see a phishing that doesn’t have a website to store the website !

This email came as a self sustained phishing solution.

My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various levels of AI support.
Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/

It is written in HTML and JS and it has a FORM whos action is POST to a website which saves the data.

The submit button goes to http://www.webformdesigner.net/wfd_f2.php?id=QjfYrttfx8.

The website is not randomly chosen 😉

Web Form Designer is a legitimate company that produces such emails …

Have a look here:  http://www.webformdesigner.net/

The mail doesn’t have anything special in it. It asks for the usual stuff : CC number, PIN (never asked by a legitimate company or webshop) , etc.


© Copyright 2006 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology


Want to work with me on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.

Related Posts

A new type of Nigerian scam ?

Usually we are used to see long emails when we talk about Nigerian Scams. But, this one is one line long. See the image. &copy Copyright 2008 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca – Security & TechnologyWant to work with me on this topic?Check Endpoint Cybersecurity to see the consulting services we […]

Nigerian scams on a totally new level

I received every day a few requests on LinkedIn and I also send a few. Many of these people I don’t know personally, and they are from all kind of industries. My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to […]

Un nou atac phishing asupra clientilor Raiffeisen

So, a new attack against Raiffeisen clients in Romania. I made the analysis. Here is the link: http://www.avira.ro/ro/stiri_securitate/un_nou_atac_phishing_asupra_clientilor_raiffeisen.html My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various levels of AI […]